Gridinsoft Logo
File Icon

The adwcleaner.exe (AdwCleaner) File Analysis

Updated 9 days ago
Checked by Malware Check
adwcleaner.exe

Technical Analysis

File Name adwcleaner.exe
File Type
PE32 executable (console) Intel 80386, for MS Windows, UPX compressed
Scanner Version 1.0.218.174
Database Version 2025-06-09 23:02:13 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
9,568,256
File Size (bytes)
2025-06-09
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
2057c9479ab87e3ff009820cb4ba090e
SHA1
3eea4f7e3d41ce9a242250926a134b78a8d12d44
SHA256
ee07ba57a62bf06f10658c00d79545b818b4ae627f9c565806dda86d4b322a0d
SHA512
67e72cf9461c2ef59450efc9f2d275e74f7edfa2d8cf15cffcaed871134ff8cc2aac1b5bb5b25ee968224f4371197d45fc1b52f6258ca52174fad64196b1018e
ImpHash
41a72e20c89811f7b335dacf0ec0e932

PE Analysis

Basic Information

▼
Icon
Hash: 3d4e8cce45e130542c29fd593453d391
Fuzzy: e3a5e9f0998cd847ce83305df1bacd1a
dHash: 715258e97261ad09
Image Base 0x00400000
Entry Point 0x01d04e80
Compilation Time 2025-03-26 14:17:50
Checksum 0x00924bdd (Actual: 0x00924bdd)
OS Version 6.0
PEiD Signatures PE32 executable (console) Intel 80386, for MS Windows, UPX compressed
Digital Signature OK
Imports 27 libraries
Exports 0 functions
Resources 11 Resources
Sections 3 Sections

Version Information

▼
CompanyName Malwarebytes
FileDescription AdwCleaner
FileVersion 8.5.1.601
InternalName AdwCleaner
LegalCopyright Copyright 2025 Malwarebytes
LegalTrademarks1 All Rights Reserved
LegalTrademarks2 All Rights Reserved
OriginalFilename AdwCleaner.exe
ProductName AdwCleaner
ProductVersion 8.5.1.601
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
UPX0 0x00001000 16,904,192 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
UPX1 0x01020000 9,330,688 bytes 9,330,176 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 5700AC39BB0CED3F35627873AD7CDA4F
.rsrc 0x01906000 126,976 bytes 126,976 bytes 5.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 4CEF4121E6EB3E573BFAB32CE42D9AE7
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 11 (1,281,714 bytes)
Resource Type Count Total Size Percentage
BINARY 2 1,158,044 bytes
90.4%
RT_ICON 6 121,647 bytes
9.5%
RT_GROUP_ICON 1 90 bytes
0%
RT_VERSION 1 888 bytes
0.1%
RT_MANIFEST 1 1,045 bytes
0.1%

Certificate Chain Analysis

▼
Certificate Information
Product AdwCleaner
Description AdwCleaner
File Version 8.5.1.601
Original Name AdwCleaner.exe
Signing Date 02:44 PM 03/26/2025 (84 days ago)
Verification Status Signed
Signers Malwarebytes Inc; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name AdwCleaner
Copyright Copyright 2025 Malwarebytes
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2013-08-01 12:00:00 → 2038-01-15 12:00:00
Signature Algorithm: sha384RSA
Serial Number: 05 9B 1B 57 9E 8E 21 32 E2 39 07 BD A7 77 75 5C
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #2 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Malwarebytes Inc #3 Chain
Validity Period: 2024-12-13 00:00:00 → 2027-12-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 06 2C 3C 46 81 63 EB 51 3E 02 E9 99 22 67 43 D6
DigiCert Timestamp 2024 #4 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #5 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #6 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
Microsoft Identity Verification Root Certificate Authority 2020 #7 Chain
Validity Period: 2020-04-16 18:36:16 → 2045-04-16 18:44:40
Signature Algorithm: sha384RSA
Serial Number: 54 98 D2 D1 D4 5B 19 95 48 13 79 C8 11 C0 87 99
Malwarebytes Inc #8 Chain
Validity Period: 2025-03-25 16:33:32 → 2025-03-28 16:33:32
Signature Algorithm: sha384RSA
Serial Number: 33 00 02 34 F4 14 A4 EB F7 1D E6 6B 3B 00 00 00 02 34 F4
Microsoft ID Verified CS EOC CA 01 #9 Chain
Validity Period: 2021-04-13 17:31:54 → 2026-04-13 17:31:54
Signature Algorithm: sha384RSA
Serial Number: 33 00 00 00 06 4A 1A FA CF 05 61 6A 74 00 00 00 00 00 06
Microsoft ID Verified Code Signing PCA 2021 #10 Chain
Validity Period: 2021-04-01 20:05:20 → 2036-04-01 20:15:20
Signature Algorithm: sha384RSA
Serial Number: 33 00 00 00 07 87 A3 34 A3 7B A5 8E 1C 00 00 00 00 00 07
Microsoft Public RSA Timestamping CA 2020 #11 Chain
Validity Period: 2020-11-19 20:32:31 → 2035-11-19 20:42:31
Signature Algorithm: sha384RSA
Serial Number: 33 00 00 00 05 E5 CF 0F FF 66 2E C9 87 00 00 00 00 00 05
Microsoft Public RSA Time Stamping Authority #12 Chain
Validity Period: 2024-11-26 18:48:55 → 2025-11-19 18:48:55
Signature Algorithm: sha384RSA
Serial Number: 33 00 00 00 4A FD B8 55 C7 62 AA C9 89 00 00 00 00 00 4A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware